| Package | Affected versions | Patched versions |
|---|---|---|
| homeassistant | < 2025.8.0 | 2025.8.0 |
| home-assistant | < 2025.8.0 | 2025.8.0 |
Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal. The Downloader integration does not fully validate file paths during concatenation, leaving a path traversal vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free